Exam Professional Cloud Security Engineer All QuestionsBrowse all questions from this exam
Go to Exam
Question 13

A customer's data science group wants to use Google Cloud Platform (GCP) for their analytics workloads. Company policy dictates that all data must be company-owned and all user authentications must go through their own Security Assertion Markup Language (SAML) 2.0 Identity Provider (IdP). The

Infrastructure Operations Systems Engineer was trying to set up Cloud Identity for the customer and realized that their domain was already being used by G Suite.

How should you best advise the Systems Engineer to proceed with the least disruption?

    Correct Answer: D

    To comply with company policy, the best course of action, with the least disruption, is to collaborate with the existing Super Administrator. As the domain is already in use, this approach will integrate the new requirements into the existing setup without requiring significant changes or initiating complex processes like domain contestation.

Discussion
sylloxOption: D

Ans :D

TNT87Option: A

The answer is A "This domain is already in use" If you receive this message when trying to sign up for a Google service, it might be because: You recently removed this domain from another managed Google account. It can take 24 hours (or 7 days if you purchased your account from a reseller) before you can use the domain with a new account. You or someone in your organization already created a managed Google account with your domain. Try resetting the administrator password and we’ll send an email to the secondary email you provided when you signed up, telling you how to access the account. You’re using the domain with another managed Google account that you own. If so, remove the domain from the other account. Contact us If none of these applies, the previous owner of your domain might have signed up for a Google service. Fill out this form and the Support team will get back to you within 48 hours.

lollo1234

Answer is D - there is no evidence that the account is lost, or similar. In a large corp it is very possible that someone (the IT org) has registered with google, and the Data science Department simply haven't been given access to it yet.

[Removed]

Agreed.

idtrooOption: D

Answer is D. https://support.google.com/cloudidentity/answer/7389973 If you're an existing Google Workspace customer Follow these steps to sign up for Cloud Identity Premium: Using your administrator account, sign in to the Google Admin console at admin.google.com. From the Admin console Home page, at the top left, click Menu ""and thenBillingand thenGet more services. Click Cloud Identity. Next to Cloud Identity Premium, click Start Free Trial. Follow the guided instructions.

shetnielOption: D

If the domain is already in use by Google Workspace (GSuite); then there is no need of setting up Cloud Identity again. The least disruptive way would be to work with the existing super administrator. Domain contestation form is required when you need to reclaim the domain or recover the super admin access. This might break a few things if not planned correctly.

TNT87Option: D

Sorry Ans is D

[Removed]Option: D

"D" is the most sensible option. The other options would be forms of escalation if D was not possible.

mahi9Option: D

Ans: D is viable option

Sammydp202020Option: A

Answer : A Here's why --> https://support.google.com/a/answer/6286258?hl=en When the form is launched > opens a google ticket. Therefore, A is the appropriate answer to this Q

ronron89Option: D

I think its D. @SomabrataPani: did you pass this exam yet?

[Removed]Option: D

Ans - D

saurabh1805Option: D

D is best answer here.

Sundar_PichaiOption: D

Least amount of disruption would mean working with the existing super admin

Ballistic_donOption: D

Ans :D

shaykeOption: A

A is the right ans

GCP72Option: D

The answer is D

KsrpOption: A

its A , https://support.google.com/a/answer/6286258?hl=en#:~:text=If%20you%20get%20an%20alert,that%20you%20don't%20manage.

CloudTripOption: D

A, B are definitely not the answer for this. Most of you are aligned with D but can somebody explain what is wrong with C ? Their domain is already used by the G-Suite. It will be least disruptive also.

lollo1234

Principle of least privilege - should the 'data science manager' be a superadmin?? Probably not. Hence D, work with the existing admin - we assume that they were chosen sensibly.

[Removed]

Also, you would only go to Google to override if there is no admin at your company.